From: 

Sent: 

To: 

Subject: 


Hanchett, James (DPH) <james.hanchett@massmail.state.ma.us> 
Monday, November 19, 2012 1:00 PM 
Salem, Sharon (DPH) 

FW: UMass Security Issue 


Sharon, Could you handle this? 


From: Cronin, John (POL) 

Sent: Monday, November 19, 2012 12:01 PM 
To: Salem, Sharon (DPH); Hanchett, James (DPH) 

Cc: Connolly, James, Major (POL); Sullivan, Kristen (POL); Miller, Jeremy (POL); Juhascik, Matthew (POL) 

Subject: FW: UMass Security Issue 

Jim - could you send me the contact info at UMass for this? I'd like to explore more control of this system with UMass- 
perhaps including the installation of our own system. 


From: Connolly, James, Major (POL) 

Sent: Monday, November 19, 2012 11:26 AM 
To: Vallaro, Guy (POL) 

Cc: Cronin, John (POL); Juhascik, Matthew (POL); Sullivan, Kristen (POL) 
Subject: Re: UMass Security Issue 

John, 

Can you address ASAP? 

Thanks 

Major James M. Connolly 


On Nov 19, 2012, at 11:23 AM, "Vallaro, Guy (POL)" <G uv . Vallaro fgM a ss Mail .State.MA.US > wrote: 
I think this needs to be addressed sooner than later, particularly the vault area 


From: Salem, Sharon (DPH) 

Sent: Monday, November 19, 2012 10:35 AM 
To: Cranstoun, Bruce (POL) 

Cc: Vallaro, Guy (POL) 

Subject: UMass Security Issue 


Hi Bruce, 

I want to inform you of a security issue we just discovered with UMass. Last week UMass updated the 
‘card swipe’ access hardware into our labs and safe. It took them a few days to work out the kinks with 
wiring. Apparently they were here over the weekend working on it. Come to find out from UMass’ Mark 
Harrison this morning, there is a software default code in their system that has been allowing up to 4 
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other UMass employees all-access to our doors for quite some time. Mark was unaware of this situation 
until this morning when one of these peopie came by to check our doors. Mark has corrected the 
problem and supposedly it is ‘just us’ within the iab with access now. 

The door access is separate from the aiarm system. As far as i know the alarm was not tripped over the 
weekend, so no one was actually in the iabs or safe area. However, UMass also is in control of the alarm 
system. If door access can be compromised, cannot aiso the aiarm system? 

We are not fully confident in UMass’ abiiity to handie the security of the drug lab. 

Sharon Salem 
Amherst Drug Laboratory 
Department of State Police 
637 N. Pleasant Street 
Amherst, MA 01003 
413-545-2601 
413-545-2608 (fax) 


2 


Folk OIG PRR 109424 



